Privacy
How Mola Mola collects and uses personal data, under the General Data Protection Regulation and the French Loi Informatique et Libertés.
Controller
Hélène Levard, sole trader (entrepreneur individuel), trading as Mola Mola, Résidence Les Hauts de Calvi, 20260 Calvi, France. SIRET: 947 821 997 00055. Contact for any question or request: hello@molamolapuzzle.com.
What is collected
Early access: your email address, and the city and country if you give them.
Orders: name, delivery and billing address, email, telephone if given, order contents and payment status. The source of the order (referring website, campaign and device type) is also recorded.
Messages: the content of what you write and the address you write from. Photos you choose to send (a damaged parcel, for example) are kept with the message.
Stockist enquiries: business name, contact details and the information given in the form.
Visits, only if you accept statistics cookies: the pages you view, your device and browser type, your approximate location and a cookie identifier.
Why, and on what basis
To take and deliver an order, and to answer questions about it: performance of the contract.
To send early-access emails about the collection: your consent, which can be withdrawn at any time.
To reply to messages, keep accounting records and keep the site secure: legitimate interest and legal obligation.
To measure audience and improve the site (Google Analytics): your consent, which can be withdrawn at any time from the Cookies page.
To know where orders come from (order origin recorded by WooCommerce): legitimate interest.
Who has access
Only Hélène Levard, and the providers needed to run the shop: Hostinger (hosting), Hostinger Reach (early-access emails), Adobe Fonts (typefaces: receives your IP address to deliver the fonts, no cookie), WooPayments and Stripe (payment), Mondial Relay (delivery), Google Analytics (audience statistics, only if you accept). They act on instruction and may not use the data for their own purposes.
Stripe and Google may process data in the United States. Such transfers rely on the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.
How long it is kept
Early-access addresses: until you unsubscribe, and at most 3 years after your last interaction with Mola Mola.
Order and invoicing records, including the recorded origin of the order: ten years, as required for accounting.
Messages: 3 years after the exchange ends.
Customer accounts: deleted after 3 years of inactivity.
Audience cookies: 2 years at most.
Your rights
You may ask for access to your data, its correction or erasure, a restriction of its use, its portability, and you may object to its use or withdraw your consent. Write to hello@molamolapuzzle.com; we answer within one month.
You may also lodge a complaint with the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr.